GOVERNATLAS / PRODUCT DOSSIER
Lumos describes campaigns scoped by applications, owners and frameworks, using entitlement-level context and prior decisions. Lumos describes rejected-access revocation, guarded exceptions, ITSM tracking and evidence reports within its access-review workflow.
01 / CONTEXT & SCOPE
Evaluate the campaign as a sequence of decisions and downstream changes, rather than a faster way to approve a list.
Evaluate the campaign as a sequence of decisions and downstream changes, rather than a faster way to approve a list. A useful reviewer needs the provenance and collection time of an entitlement, its business owner and the reason it remains necessary. Ask how account-level removal differs from removing one entitlement, and how the proposed integrations represent unmatched identities and non-human accounts.
The reviewed page supplies vendor assertions, including AI recommendations and automation. Its speed, saved-hours and audit-readiness statements are excluded as GovernAtlas findings. Current edition, integration permissions and retention need proposal-specific evidence.
02 / YOUR EVALUATION
Build a synthetic campaign with one employee, one service account and one account without a current owner. Retain one permission, reject another and record an exception with a named expiry. Interrupt the sandbox revocation workflow and compare the campaign status, ITSM handoff and connected-system permission. Restore the connector and check whether retries create duplicate actions or preserve the original decision.
GovernAtlas editorial proposal. We have not performed this test.
THE OPERATING DETAIL
GovernAtlas analysis: practical review considerations, not findings from a product test.
03 / DOCUMENTED EVIDENCE
Each statement retains its classification and preserved source. A vendor assertion is not an independent test result.
Lumos describes rejected-access revocation, guarded exceptions, ITSM tracking and evidence reports within its access-review workflow.
Authority: vendor owned
Observed 2026-10-17 · Reviewed 2026-10-18 · current until 2026-11-16
Artifact SHA-256: c4437d3c767502e57047bf7a4d94ef7abbf31b910b0ff112fbc2c8305e62d087
The hash identifies the preserved capture. The live source may have changed.
Lumos describes campaigns scoped by applications, owners and frameworks, using entitlement-level context and prior decisions.
Authority: vendor owned
Observed 2026-10-17 · Reviewed 2026-10-18 · current until 2026-11-16
Artifact SHA-256: c4437d3c767502e57047bf7a4d94ef7abbf31b910b0ff112fbc2c8305e62d087
The hash identifies the preserved capture. The live source may have changed.
Organization identity asset from its official website; inclusion does not imply endorsement.
Official website ↗ · Original asset ↗04 / BEFORE YOU COMMIT
Resolve these with the provider and your own evaluation team.
Regulatory applicability requires a separate, current determination. Inclusion is not certification.
COMPLIANCE / CLAIMS, SCOPE & GAPS
These labels describe this dossier’s current evidence coverage. A published mention may be a framework mapping, a qualified assertion or a limitation; it is not a compliance finding.
Not established in this dossier
US healthcare privacy & securityNot established in this dossier
EU personal data protectionNot established in this dossier
Assurance report · not a lawNot established in this dossier
Information security management standardNot established in this dossier
EU artificial intelligence regulationFor HIPAA-regulated use, request service-specific BAA eligibility, processing scope and responsibility details. Missing evidence here does not establish noncompliance. Payment cannot alter these evidence labels.
KEEP THE RECORD USEFUL
Have a source that changes this picture? Submit it for editorial review.